Privacy Policy

1. Introduction

LaunchDeck ("we", "us", "our", or "Service") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered pitch deck generation platform.

By using LaunchDeck, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Information You Provide

We collect information that you provide directly to us, including:

• Account Information: Email address, username, password, and profile information
• Content: Pitch deck content, prompts, documents, images, and other materials you upload or create
• API Keys: Third-party API keys (OpenAI, Google, Anthropic, etc.) that you choose to use (stored securely and encrypted)
• Payment Information: Billing address, payment method details (processed through secure third-party payment processors)
• Communication: Messages, feedback, and support requests you send to us

2.2 Automatically Collected Information

When you use our Service, we automatically collect certain information, including:

• Usage Data: How you interact with the Service, features used, time spent, and navigation patterns
• Device Information: IP address, browser type, operating system, device identifiers
• Log Data: Access times, pages viewed, clicks, and other actions
• Cookies and Tracking: Cookies, web beacons, and similar tracking technologies (see Section 8)

2.3 Third-Party Information

We may receive information about you from third-party services, including:

• Authentication providers (if you sign in with Google, GitHub, etc.)
• Payment processors
• Analytics services
• AI service providers (when processing your requests)

3. How We Use Your Information

We use the information we collect to:

• Provide and Improve the Service: Process your requests, generate pitch decks, and enhance functionality
• Account Management: Create and manage your account, authenticate users, and process transactions
• Communication: Send service-related notifications, respond to inquiries, and provide customer support
• Analytics and Research: Analyze usage patterns, improve our AI models, and conduct research (with anonymized data)
• Security: Detect, prevent, and address fraud, security issues, and technical problems
• Legal Compliance: Comply with legal obligations and enforce our terms of service
• Marketing: Send promotional communications (with your consent, and you can opt-out at any time)

4. Data Storage and Security

4.1 Storage

Your data is stored on secure servers. We implement appropriate technical and organizational measures to protect your information, including:

• Encryption of data in transit (SSL/TLS) and at rest
• Regular security assessments and updates
• Access controls and authentication
• Secure API key storage (encrypted and never exposed)

4.2 API Keys

When you provide your own API keys:

• Keys are encrypted and stored securely
• Keys are only used to process your requests
• We never share your keys with third parties
• You can delete your keys at any time
• All API calls are made directly from your browser or our secure servers

4.3 Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes outlined in this policy. You can request deletion of your data at any time (see Section 7).

5. Information Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

5.1 Service Providers

We may share information with third-party service providers who perform services on our behalf, including:

• Cloud hosting and infrastructure providers
• Payment processors
• Analytics and monitoring services
• AI model providers (when processing your requests)

These providers are contractually obligated to protect your information and use it only for the purposes we specify.

5.2 Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to:

• Comply with legal obligations
• Protect our rights, property, or safety
• Protect the rights, property, or safety of our users or others
• Prevent fraud or abuse

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections.

5.4 With Your Consent

We may share your information with your explicit consent or at your direction.

6. AI Processing and Third-Party Services

When you use LaunchDeck to generate content:

• Your Own API Keys: If you use your own API keys, your content is sent directly to the AI provider (OpenAI, Google, etc.) according to their privacy policies. We do not store your content when using your own keys.
• Our API Keys: If you use our API keys, your content may be processed by third-party AI providers. We take measures to minimize data retention and protect your privacy.
• Content Storage: Generated pitch decks are stored on our servers to enable you to access, edit, and export them. You can delete your content at any time.
• Model Training: We do not use your content to train AI models without your explicit consent. Any use of your content for model improvement will be clearly disclosed and require your opt-in.

7. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Portability: Request transfer of your data to another service
• Objection: Object to certain processing of your information
• Restriction: Request restriction of processing in certain circumstances
• Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, please contact us at privacy@launchdeck.me. We will respond to your request within 30 days.

You can also:

• Update your account information through your account settings
• Delete your account and data through account settings
• Opt-out of marketing emails using the unsubscribe link
• Manage cookie preferences through your browser settings

9. Children's Privacy

LaunchDeck is not intended for children under the age of 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately, and we will delete such information.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. We take appropriate safeguards to ensure your information receives adequate protection, including:

• Using standard contractual clauses approved by data protection authorities
• Ensuring recipients are certified under appropriate data protection frameworks
• Implementing security measures consistent with this Privacy Policy

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect, use, and disclose
• Right to delete your personal information
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

To exercise these rights, contact us at privacy@launchdeck.me.

12. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Right to access, rectify, or erase your personal data
• Right to restrict or object to processing
• Right to data portability
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

Our legal basis for processing includes: consent, contract performance, legal obligations, legitimate interests, and protection of vital interests.

13. Data Breach Notification

In the event of a data breach that may affect your personal information, we will:

• Investigate and contain the breach immediately
• Notify affected users and relevant authorities as required by law
• Provide information about the nature of the breach and steps taken
• Recommend actions you can take to protect yourself

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on our website with a new "Last updated" date
• Sending an email notification to registered users
• Displaying a prominent notice within the Service

Your continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: privacy@launchdeck.me
Website: https://launchdeck.me
Address: [Your Company Address]

For data protection inquiries in the EEA, you can also contact your local data protection authority.